Child-Resistant Cannabis Packaging: US State-by-State Laws

Cannabis packaging in the United States is governed by two layers: a federal baseline that applies wherever a product falls under the Consumer Product Safety Commission’s special-packaging rules, and a state-specific layer set by the regulator in each legal cannabis market. Most buyers stop at the federal layer, then discover that compliant packaging for California is not compliant packaging for Massachusetts, and that the difference lives in exit bags, tamper evidence, plain packaging rules and labeling requirements. This guide walks through the framework, gives a state-by-state table for the ten largest US cannabis markets, and explains the three practical implications for a buyer sourcing child-resistant glass packaging in 2026.

The two-layer framework

The federal layer is the Poison Prevention Packaging Act, with its implementing regulation in 16 CFR 1700.15 and the test protocol in 16 CFR 1700.20 and ASTM D3475. For any substance the CPSC has classified as requiring special packaging — which includes most cannabis products in states that have legalised them — the package must be difficult for a young child to open and not difficult for an adult. The standard mechanism is a closure that requires two dissimilar motions, such as push-and-turn or squeeze-and-turn.

The state layer is where the differences live. Each state’s cannabis authority — the Department of Cannabis Control in California, the Marijuana Enforcement Division in Colorado, the Liquor and Cannabis Board in Washington, and so on — layers additional requirements on top of the federal baseline. Common state-specific elements include:

• Exit bags. Some states require that any cannabis product leaving a dispensary be placed inside an opaque, reclosable exit bag before it leaves the store. The bag, not the jar, is what keeps the product out of a child’s hands once the consumer is home.
• Tamper-evident seals. Many states require a single-use seal that breaks visibly on first opening.
• Plain packaging rules. Some states restrict logos, colours and imagery to reduce appeal to minors.
• Reclosable requirement. The federal test only requires that adults can open the package. State rules often require that the package remain child-resistant after repeated use.
• Specific closure types. A small number of states point to ASTM D3475 closure classes or to a particular testing protocol.

Major state rules at a glance

The table below covers the ten largest US recreational cannabis markets by 2025 sales volume. Verify the specific text of the current regulation with the state authority and your regulatory counsel before you commit; rules change and summaries age quickly.

Two patterns jump out. First, the federal 16 CFR 1700 standard is the universal baseline; no state has chosen to deviate downward. Second, the state-specific differences cluster around exit bags, tamper-evident seals and plain packaging — not the CR closure itself. That is good news for buyers, because it means a well-designed child-resistant closure can serve almost every US market with the same mould.

Exit bags, explained

An exit bag is an opaque, reclosable bag that the dispensary uses to put the customer’s product out of sight on the way to the car and home. The bag has to be opaque enough that the product is not visible through it, and reclosable enough that a child cannot easily open it. Exit bags are a state-level requirement in California, Colorado, Washington, Oregon and Massachusetts; in other states they are dispensary practice or retailer policy rather than a regulatory mandate.

For the brand supplying the jar or bottle, the exit bag is not your responsibility as the manufacturer. But it shapes the package you sell, because the jar has to fit inside a typical exit-bag footprint and weight allowance, and because the exit bag requirement changes the kind of decoration that is worth doing on the jar itself — elaborate external artwork is less valuable when the product will spend most of its life inside an opaque bag.

Tamper-evident seals

Most states require that the consumer be able to tell whether the package has been opened between the factory and the dispensary. The common solutions are a shrink band around the closure that breaks on first opening, a tear strip on the jar mouth, or a breakable ring on the cap. The seal is part of the same compliance story as CR, but it is a different test (visible damage, not child-resistance), and it is usually supplied as a separate component from the closure.

If your CR cap has a built-in tamper-evident band (the ring that breaks away on first opening), one component covers both requirements. If it does not, you will need a separate band, which means a separate specification, a separate supplier and a separate cost line.

Three practical implications for buyers

One CR closure covers most US markets. A stock child-resistant closure certified under 16 CFR 1700 and ASTM D3475 will be accepted in every state listed above. The CR mechanism is not where states diverge.

State divergence lives in the secondary components. Exit bags, tamper-evident seals and labeling rules are where you will need a state-specific configuration. For national distribution, build the closure once and add state-specific tamper-evident bands and exit bags at the dispensary or distributor end.

Reclosable is the criterion that fails most often. The federal test passes a package that an adult can reclose. State rules frequently require that the package remain child-resistant after multiple re-closings — i.e., the mechanism cannot be one-shot. A closure whose CR function degrades after the first opening is not compliant in those states, even if it passed the federal test.

Common mistakes

• Stopping at 16 CFR 1700 and ignoring state-specific exit-bag and tamper-evident rules
• Assuming California, Colorado and Washington have the same rules — the differences are subtle but real
• Treating the CR certificate as permanent — any change of cap supplier, liner, bottle mould or factory invalidates the certificate
• Choosing a closure whose CR mechanism does not survive re-closing
• Forgetting tamper-evident on the assumption that CR covers it — it does not
• Ordering retail quantities before the package has been re-validated after any component change